Privacy Policy
1. Data Controller
The data controller for this website is:
Pop Adrian Bogdan
Romania
popadrianbogdan@gmail.com
This website (popadrianbogdan.com) is a personal portfolio. It is not operated by a legal entity; the natural person named above is solely responsible for all data processing activities described in this policy.
2. What Data Is Collected and Why
2.1 Contact form
When you submit the contact form at /contact, the following personal data is collected:
Name — to address you personally in a reply
Email address — to send you a reply
Message content — the subject of your inquiry
Timestamp of consent — recorded for audit purposes
Legal basis: Article 6(1)(a) GDPR — you provide explicit consent by checking the consent checkbox before submitting the form. You may withdraw consent at any time by contacting popadrianbogdan@gmail.com. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Retention: Your data is retained only for as long as necessary to respond to your inquiry and for a reasonable period thereafter (typically no longer than 12 months). Once no longer needed, it is deleted from the email account and any associated systems.
No automated decision-making. Your data is not subject to automated decision-making or profiling as defined in Article 22 GDPR.
2.2 Server logs
The web server automatically records your IP address, browser type, and the pages you visit as part of standard HTTP access logs. These logs are retained for up to 30 days for security and debugging purposes and are not used to identify individual visitors.
2.3 Google Fonts
This site loads fonts from Google Fonts (fonts.googleapis.com). When your browser fetches the font files, your IP address is transmitted to Google's servers, which may be located outside the EEA. Google's use of this data is governed by Google's Privacy Policy.
2.4 Cookies and tracking
This website does not use analytics, advertising, or tracking cookies. No cookies are set by this site itself. The Google Fonts request may cause Google to set its own cookies; refer to Google's policy for details.
3. Data Processors
Contact form submissions are delivered via Resend Inc. (1111B S Governors Ave STE 3, Dover, DE 19904, USA), an email delivery service. Resend processes your name, email address, and message content solely to transmit the email on behalf of the controller. Data may be transferred to and processed in the United States. This transfer is covered by Standard Contractual Clauses (SCCs) under Article 46(2)(c) GDPR as incorporated in Resend's Data Processing Agreement.
No other third-party data processors receive personal data submitted via this site.
4. Your Rights Under GDPR
Under the General Data Protection Regulation (EU) 2016/679 and Romanian Law no. 190/2018, you have the following rights regarding your personal data:
Right of access (Art. 15) — request a copy of the data held about you.
Right to rectification (Art. 16) — request correction of inaccurate data.
Right to erasure (Art. 17) — request deletion of your data ("right to be forgotten").
Right to restriction of processing (Art. 18) — request that processing be limited.
Right to data portability (Art. 20) — receive your data in a structured, machine-readable format.
Right to object (Art. 21) — object to processing based on legitimate interests.
Right to withdraw consent (Art. 7(3)) — withdraw consent at any time without affecting prior lawful processing.
To exercise any of these rights, contact: popadrianbogdan@gmail.com. Requests will be addressed within 30 days as required by Article 12(3) GDPR.
5. Right to Lodge a Complaint
If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the Romanian national supervisory authority:
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
B-dul G-ral. Gheorghe Magheru 28–30, Sector 1, 010336 București, România
www.dataprotection.ro · anspdcp@dataprotection.ro
You may also contact the supervisory authority of your country of residence within the EEA.
6. Changes to This Policy
This policy may be updated to reflect changes in data processing practices or applicable law. The "Last updated" date at the top of this page will reflect any changes. Continued use of the contact form after an update constitutes acceptance of the revised policy.